Privacy Policy

88iii ("we", "us", "our", "the Platform") is an international online gaming and sportsbook platform serving English-preference Indonesian players. We operate with a strong commitment to responsible data stewardship, recognizing that the trust of our users is essential to delivering a premium gaming experience.

This Privacy Policy describes in full detail the personal data that 88iii collects from users of the Platform, the purposes for which that data is processed, the legal basis on which processing is conducted, how data is stored and protected, the circumstances under which data may be shared with third parties, the rights available to you as a data subject, and how to exercise those rights.

This Privacy Policy forms part of the 88iii Terms & Conditions. Reading both documents together will give you a complete picture of how the Platform operates and what obligations and rights apply to your account. In the event of a conflict between this Privacy Policy and the Terms & Conditions on a privacy-specific matter, this Privacy Policy governs.

88iii collects personal data across several categories. The table below sets out each category, the specific data points within it, and whether collection is mandatory or optional for account operation.

We do not collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, biometric data (beyond standard selfie KYC), or data concerning sexual orientation, except where such data is voluntarily disclosed by you in the context of a support conversation and is directly relevant to your query.

88iii collects personal data through the following channels:

Direct Collection

Data you provide to us directly when you: register an account on the Platform; complete the KYC verification process; make a deposit or request a withdrawal; contact customer support via live chat, email, or WhatsApp; opt in to a promotional offer or tournament; or complete any form on the Platform (including responsible gaming tool activation forms).

Automated Collection

Data collected automatically through your use of the Platform, including technical data and gaming data as described in Clause 2. This collection is facilitated by cookies, server logs, session tracking technology, and our gaming platform's activity recording systems. See Clause 8 for full details on cookies and tracking.

Third-Party Sources

In limited circumstances, we may receive data about you from third parties, including:

• Payment processors and banking partners — confirmation of transaction status, account name matching for fraud prevention.
• Identity verification service providers — document authentication results during the KYC process.
• Anti-fraud and AML (Anti-Money Laundering) screening services — sanctions list checks and politically exposed persons (PEP) screening results.
• Game studio providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Pocket Games Soft, and others) — game session outcomes and RNG certification data passed back to the Platform for bet settlement and account crediting purposes.

88iii processes your personal data only for specified, explicit, and legitimate purposes. The table below sets out each processing purpose, the data categories used, and the legal basis on which processing is conducted.

We do not use automated decision-making processes — including profiling — to make decisions that produce legal or similarly significant effects on individual users without human review. Where automated systems flag an account for fraud or bonus abuse investigation, a trained compliance team member reviews the case before any account action is taken.

88iii does not sell your personal data. We share your data only in the limited circumstances described below, and only to the extent necessary for the specific purpose of each share.

Service Providers & Data Processors

We engage carefully selected third-party service providers who process data on our behalf under strict contractual obligations that prohibit them from using your data for any purpose beyond the specific service they provide to 88iii. These include:

• Payment processors — Indonesian banking partners and e-wallet providers (BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja, and others) for transaction processing and fraud screening.
• KYC and identity verification providers — for document authentication and sanctions screening.
• Game studio providers — game session data is passed to and from providers such as Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft solely for the purpose of delivering and settling game outcomes.
• Cloud infrastructure providers — for secure hosting, database management, and content delivery.
• Customer support platform providers — for live chat functionality and support ticket management.
• Analytics providers — using aggregated, anonymized data only, for Platform performance monitoring.

Legal Disclosure

We may disclose your personal data to law enforcement agencies, regulatory bodies, courts, or other public authorities if we are legally required to do so, or if we reasonably believe disclosure is necessary to: comply with a legal obligation; protect the vital interests of a person; prevent, investigate, or take action against suspected fraud, money laundering, or other criminal activity; or enforce our Terms & Conditions.

Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 88iii's business, personal data held by 88iii may be transferred to the acquiring entity as part of that transaction. In such an event, affected users will be notified via email and through an on-platform announcement, and the acquiring entity will be bound by this Privacy Policy or will provide users with adequate prior notice of any material change to their data handling practices.

As an internationally operating online gaming platform, 88iii may transfer your personal data to servers and service providers located outside Indonesia. Where such transfers occur, we ensure that appropriate safeguards are in place to protect your data to a standard at least equivalent to the protections described in this Privacy Policy.

Safeguards employed for international transfers include:

• Standard contractual clauses incorporated into data processing agreements with all international service providers.
• Transfer impact assessments conducted prior to engaging any new international data processor that will handle personally identifiable information.
• Preference for service providers operating in jurisdictions with recognized adequate data protection frameworks where technically and commercially feasible.
• Data minimization principles applied at transfer level — only the minimum data necessary for the specific service is transmitted across borders.

Your gaming data, financial transaction data, and KYC documents are stored on servers utilizing encryption at rest (AES-256) and in transit (TLS 1.3). Access to production databases containing personal data is restricted to a small number of authorized personnel and is subject to comprehensive access logging and anomaly detection.

88iii retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is either securely deleted using industry-standard data destruction protocols or anonymized in a manner that prevents re-identification, and thereafter retained only in aggregated statistical form for service improvement purposes.

88iii uses cookies and similar tracking technologies on the Platform to deliver core functionality, maintain your session, and analyze how the Platform is used. The following categories of cookies are deployed:

Strictly Necessary Cookies

These cookies are essential for the Platform to function. They maintain your authenticated session, store your language and display preferences, and enable the cashier and live chat functions. These cookies cannot be disabled without significantly impairing your ability to use the Platform. No consent is required for strictly necessary cookies.

Performance & Analytics Cookies

These cookies collect aggregated information about how users navigate the Platform — which game categories are most visited, average session lengths, and page load performance metrics. The data collected is anonymized before analysis and is used exclusively to improve the Platform. These cookies are activated only with your consent, obtained via the cookie preference center displayed on your first visit.

Functional Cookies

These cookies remember your choices and preferences — such as your preferred game lobby view, recently played games, and responsible gaming settings — to deliver a more personalized experience. They operate within your session and are cleared when you log out, unless you select the "Remember Me" option at login, in which case a 30-day persistent session token is stored.

Managing Your Cookie Preferences

You may adjust your cookie preferences at any time through your browser settings or by contacting our support team. Disabling strictly necessary cookies will impair Platform functionality. Disabling performance or functional cookies will not affect your ability to place bets, make deposits, or access your account balance.

88iii employs a comprehensive, multi-layered security framework to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security posture includes the following controls:

• Encryption at rest and in transit: All personal data stored in our databases is encrypted using AES-256. All data in transit between your browser and our servers uses TLS 1.3 with enforced HTTPS. Connections using older, insecure protocols are rejected.
• Access control: Access to systems containing personal data is restricted on a strict need-to-know basis. All internal access is governed by role-based access controls, multi-factor authentication, and comprehensive access logging.
• Network security: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and continuous 24/7 network monitoring. Distributed denial-of-service (DDoS) mitigation is in place at both the network and application layers.
• Vulnerability management: Regular security assessments, penetration tests by qualified third-party security firms, and automated vulnerability scanning are conducted on a scheduled basis. Critical findings are remediated within defined SLA timeframes.
• Incident response: 88iii maintains a documented security incident response plan. In the event of a data breach that poses a risk to users, affected individuals will be notified within 72 hours of 88iii becoming aware of the breach, via email to their registered address and via on-platform notification.
• Staff training: All 88iii staff with access to personal data undergo mandatory data protection training on joining the company and at least annually thereafter.

As a user of the 88iii Platform, you have the following rights with respect to your personal data. These rights are available to all users regardless of geographic location, reflecting 88iii's commitment to international privacy standards.

To exercise any of the rights listed above, contact the 88iii support team via on-platform live chat or by emailing [email protected] (plain text — not a clickable link). Please include your registered username, the email address associated with your account, and a clear description of the right you wish to exercise. We will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. In cases of particular complexity, this period may be extended by a further 30 days, with written notice provided to you before the initial period expires.

Identity verification is required before any data right request is fulfilled. This is a security measure to ensure that personal data is not disclosed to or deleted at the request of an unauthorized party. You may be asked to confirm your identity via a one-time code sent to your registered email or phone number, or via a brief live-chat verification exchange.

The 88iii Platform is strictly intended for adults aged 21 and over. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. The minimum age restriction of 21+ is enforced through our mandatory KYC identity verification process, which requires submission of a government-issued photo ID confirming date of birth before any withdrawal is processed.

If you are a parent or guardian and you believe that a minor in your care has registered an account on the Platform or provided personal data to 88iii without your consent, please contact us immediately via live chat or at [email protected] (plain text only). Upon receiving a substantiated report, we will take all reasonable steps to promptly close the account, delete any associated personal data that is not subject to legal retention obligations, and reverse any deposits to the originating payment method where technically feasible.

The 88iii Platform may contain references to or integrations with third-party game studios and payment processors whose own privacy policies and data practices are distinct from those of 88iii. When you interact with a third-party game — for example, launching a live dealer table powered by Evolution Gaming or a slot title by Pragmatic Play — a direct game session connection is established between your browser and the relevant studio's game server. The studio receives your game session identifier and RNG outcomes; it does not receive your full identity data, financial account details, or KYC documents.

88iii is not responsible for the privacy practices of third-party game studios, payment processors, or any external websites that may be referenced in promotional content. We encourage you to review the privacy policies of any third-party service with which you interact. Our selection of game and payment partners is based in part on their adherence to recognized data protection standards, but we cannot guarantee the practices of external entities beyond the contractual obligations we impose on them as data processors.

88iii reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable legal requirements, or operational circumstances. When material changes are made — meaning changes that affect the purposes for which your data is processed, introduce new categories of data collection, alter your rights, or change data sharing arrangements — we will notify you by one or more of the following methods:

• A prominent notice displayed on the Platform homepage and within the authenticated account area for a period of at least 14 days following the change.
• An email notification to your registered email address, sent at least 7 days before the amended policy takes effect.
• An in-platform notification displayed upon your next login following the update.

The version number and "Last Updated" date at the top of this document will be incremented on every revision. Your continued use of the Platform following the effective date of an amended Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to a material amendment, you should contact support to request account closure before the amendment takes effect; we will process any pending withdrawals subject to standard KYC requirements before closing the account.

Non-material changes — such as typographical corrections, clarifications that do not alter the substance of the policy, or updates to contact details — may be made without individual notification, though the version date will still be updated to reflect the revision.

For all privacy-related inquiries, data rights requests, or concerns about how 88iii processes your personal data, please use the contact details below. All addresses and numbers are displayed as plain text only and are not clickable links.

Support agents are available 24 hours a day, 7 days a week, including Indonesian public holidays such as Idul Fitri, Indonesian Independence Day (17 August), Nyepi, and Christmas. All agents are fluent in both Bahasa Indonesia and English. Service hours are aligned to WIB (UTC+7), though the Platform and live chat remain operational across all Indonesian time zones including WITA (UTC+8) and WIT (UTC+9).